Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
File: 8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft (raw, json)
Hash identifier: 6s2fUEpvGLuR7nJ26f1jPnNFH7ByV1+RQxZCrQUtOTk=
Subject key identifier: 83:FA:B0:C8:94:8C:0B:F0:EE:05:E1:45:F6:DA:08:8F:33:53:1B:08
Authority key identifier: F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF
Certificate issuer: /CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff
Certificate serial: 019D333F09680F3D4174D5A9EE4C03BF9E0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
Manifest number: 0968
Signing time: Sat 28 Mar 2026 07:01:02 +0000
Manifest this update: Sat 28 Mar 2026 07:01:02 +0000
Manifest next update: Sun 29 Mar 2026 07:01:02 +0000
Files and hashes: 1: 8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl (hash: rp4PVGVTOjij6DDwG4/dzYnTQyufiXZ+39FsQLN1esU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3f:09:68:0f:3d:41:74:d5:a9:ee:4c:03:bf:9e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff
Validity
Not Before: Mar 28 07:01:02 2026 GMT
Not After : Mar 29 07:01:02 2026 GMT
Subject: CN=83fab0c8948c0bf0ee05e145f6da088f33531b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cd:c1:30:1e:95:dc:e4:75:5a:a6:11:9c:92:
3b:65:7e:bd:11:94:03:98:a4:1b:f0:0d:aa:9f:67:
11:70:5e:fb:e7:9b:d1:1b:78:59:a4:3f:fb:fe:41:
d5:4c:3c:ff:88:5b:95:cf:5d:94:91:2d:05:85:82:
9e:ce:81:e3:2b:f6:04:c7:f1:c9:cc:72:25:a3:5f:
77:b1:c4:3a:a1:c3:a7:31:0a:95:15:0b:c8:09:ca:
b5:ab:02:dd:78:1a:39:b0:93:c3:2d:78:aa:89:dc:
e5:79:bd:bf:2a:42:72:42:49:31:6a:5b:77:9f:03:
1b:85:34:47:73:5c:9d:9e:9a:d2:01:b5:06:0e:84:
42:99:dd:03:69:73:6b:9f:eb:2d:89:e4:4c:f4:25:
e8:0f:d5:b3:bf:49:38:27:19:11:dd:b8:ff:15:95:
f8:d2:70:9f:a1:31:bc:bd:f4:a2:c3:39:56:e9:28:
fd:88:35:ed:ef:5a:b9:17:d7:d4:02:ca:9a:e5:01:
64:11:e4:93:a6:c2:b9:b5:ce:34:8a:58:27:45:e4:
27:ff:5e:7e:9c:21:fd:c0:67:52:d2:b7:fc:c0:d7:
07:da:c4:21:16:3f:f5:e1:bd:28:7f:46:71:d4:82:
da:b4:29:ce:76:62:5a:2f:9f:5b:3f:83:b1:2a:cd:
b3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FA:B0:C8:94:8C:0B:F0:EE:05:E1:45:F6:DA:08:8F:33:53:1B:08
X509v3 Authority Key Identifier:
keyid:F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:89:96:19:a4:6c:08:95:8b:4e:05:6a:b6:7f:a6:c2:f0:5b:
7c:f7:70:06:04:56:8d:62:1d:91:71:ae:5c:10:12:59:f9:dd:
88:4d:d2:cf:af:52:fb:d9:87:dd:3d:48:1f:bb:6e:4b:de:ee:
c3:66:81:9d:88:e4:ce:24:0f:72:d5:24:74:4f:36:97:c2:a9:
25:2a:f1:c9:31:22:3f:cd:a8:60:e0:6a:31:71:59:00:5d:83:
c0:cb:a0:7c:de:e4:5a:99:47:52:c4:0c:ef:7c:9e:3f:44:09:
3a:12:70:af:9c:18:b3:1c:a0:ec:8d:28:da:5f:2d:5c:84:25:
d7:da:10:f1:8d:0b:af:76:f5:ff:f4:a5:6d:e8:da:5c:08:df:
1c:e2:b3:0a:0d:60:56:eb:99:85:e1:6d:09:b2:18:d1:37:e4:
16:a6:8e:f3:f7:6a:de:17:28:b8:c9:80:a1:8c:08:82:8e:8a:
73:b0:80:5b:36:55:0d:58:90:93:aa:91:aa:93:24:d6:92:20:
3d:f2:70:98:37:91:61:ab:bd:0c:bd:30:aa:51:12:5a:b6:d8:
8e:fc:87:08:10:9c:52:b8:71:b1:39:6c:6b:8d:b1:ca:66:b2:
2e:59:ac:70:c9:13:a3:5f:89:e5:b9:cb:68:71:c9:fe:be:f7:
8a:ea:c7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:00 2026 by rpki-client